cbcvebase.
CVE-2004-0457
published 2004-09-28

CVE-2004-0457: The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files…

PriorityP412medium4.6CVSS 2.0
AVLACLAuNCPIPAP
EPSS
0.52%
40.4th percentile
The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a symlink attack on temporary files.

Affected

1 ranges
VendorProductVersion rangeFixed in
oraclemysql<= 4.0.20—

CVSS provenance

nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat4.6MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.